hyperframes

mirror of https://github.com/heygen-com/hyperframes.git synced 2026-09-03 12:54:29 +00:00

Files

T

Vance Ingalls 1324de54a8 fix(cli): bind studio preview server to loopback by default (#1210 )

## Summary

- Binds the Studio preview server (`packages/cli`) to `127.0.0.1` instead of `0.0.0.0` so it is only reachable from localhost.
- Adds a `--host` flag for callers that genuinely need to expose the server on a wider interface (e.g. Docker, remote dev boxes).

## Security

**F-001 HIGH** — Studio preview server was binding on all interfaces, making it reachable from any network the developer's machine was on (including shared Wi-Fi, corp LAN). Because the server serves the project filesystem under no auth, any peer on the same network could read arbitrary project files. Restricting to loopback closes this exposure for the default case.

## Test plan

- [x] `hyperframes preview` starts — server reachable on `localhost:<port>`, not on LAN IP
- [x] `hyperframes preview --host 0.0.0.0` still binds on all interfaces for Docker / remote-dev use cases
- [x] Existing unit tests pass

2026-06-05 14:48:22 -07:00

auth

fix(cli): address code-review findings on OAuth PR

2026-05-28 05:59:24 +00:00

background-removal

…

browser

fix(cli): lazy-load @puppeteer/browsers to prevent debug package crash (#1185 )

2026-06-03 22:53:16 -04:00

capture

feat(capture): pipeline improvements — contact sheets, design styles, snapshot

2026-05-21 10:57:37 -07:00